Ledger says weak random number generation, not hardware wallet, drove Coldcard hack

Ledger said the key issue behind the $116 million Coldcard hack was not the hardware wallet itself but a weak random number generation method. According to BeInCrypto, Ledger Chief Human Agency Officer Ian Rogers said in a Bloomberg interview that a 2021 firmware bug in Coldcard used a software-based random number generator for seed creation instead of a hardware chip. Rogers said this sharply reduced the number of possible private keys, leaving security weak enough for AI to find the keys. Rogers added that AI is being used to identify security vulnerabilities, while AI-based development is speeding up code deployment and increasing security risks. AI agents with access to corporate email accounts and other login credentials could also emerge as a new security threat.